Legal & Privacy
Policies & Terms
Contents
Who we are & scope of this policy
This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit wpali.me (the “Website”). The Website is operated by Ali Kojok (“I”, “me”, “the Controller”), a personal website based in Italy.
As a personal website whose services are offered to individuals across the European Union and beyond, this policy is written in compliance with the EU General Data Protection Regulation 2016/679 (GDPR), the Italian data protection code (Codice in materia di protezione dei dati personali, d.lgs. 196/2003 as amended by d.lgs. 101/2018), and applicable ePrivacy rules.
The Website offers:
- Personal blog posts and photography
- A community gallery featuring photographs of third parties from the WordPress community
- A booking form for professional website-related services (Book Me)
- A collaboration enquiry form for media creators in the WordPress community (Collab)
- Blog post comments, with optional WordPress.org or Gravatar profile integration
This policy covers all data processing activities connected to the Website. It does not cover external professional services offered through alpidigitali.com, which has its own privacy terms.
Data we collect and why
2.1 Booking form (Book Me page)
When you submit a service booking enquiry, we collect:
- Full name
- Email address
- Phone number
- Service type requested
- Approximate budget
- Goals or project description (as provided by you)
This data is used solely to evaluate and respond to your booking request.
2.2 Collaboration form (Collab page)
When you submit a collaboration enquiry as a media creator, we collect the same categories of personal data listed above (§ 2.1), adapted to the context of media collaboration (e.g., media type instead of service type). This data is used to assess and respond to collaboration proposals.
2.3 Blog comments
If you post a comment on a blog post, we collect:
- Your display name (as provided by you or pulled from your WordPress.org or Gravatar profile)
- Email address (required by WordPress to match a Gravatar; not publicly displayed unless a Gravatar profile is linked)
- Website URL (optional)
- Your comment content
- IP address (logged automatically by WordPress for spam and abuse prevention)
If you authenticate via a WordPress.org or Gravatar account to post a comment, those third-party services will process your login data under their own respective privacy policies. We receive only the display name, avatar image, and email hash made available through those services.
2.4 Community gallery
The Website contains photographs taken at public WordPress community events (such as WordCamp Europe, WordCamp Torino, and WordCamp Switzerland) in which third parties may appear. These images are shared for community and documentary purposes. If you appear in a photograph and wish to exercise your rights (including removal), please contact me using the details in § 15.
2.5 Server logs
Like any website hosted on a server, the hosting provider automatically logs standard technical data when you visit, including your IP address, browser type, operating system, pages requested, and timestamps. These logs are retained by the hosting provider for security and operational purposes and are not used by me for profiling or marketing.
2.6 Data you do not need to provide
You are never required to provide data beyond what is necessary to use a specific feature. Fields marked optional on forms are genuinely optional. Providing less data may mean I am unable to respond to or process your enquiry.
Legal bases for processing
Under GDPR Article 6, all processing of personal data must have a valid legal basis. The table below maps each processing activity to its applicable legal basis.
| Processing activity | Legal basis (GDPR Art. 6) | Details |
|---|---|---|
| Responding to booking enquiries | Art. 6(1)(b) — pre-contractual steps | Processing is necessary to take steps at your request prior to entering into a contract |
| Responding to collaboration enquiries | Art. 6(1)(b) — pre-contractual steps | Same as above; assessing and responding to your enquiry |
| Storing booking/collab submissions | Art. 6(1)(f) — legitimate interest | Retaining enquiry records for operational continuity; limited to what is necessary |
| Blog comments (publishing) | Art. 6(1)(a) — consent | You voluntarily submit and publish the comment; you may request deletion at any time |
| Blog comments (spam/abuse prevention via IP) | Art. 6(1)(f) — legitimate interest | Preventing abusive or spam content to maintain a safe community space |
| Community gallery photographs | Art. 6(1)(f) — legitimate interest | Documentary and community purposes; images taken at public events; subject to right to object |
| Website analytics (Google Site Kit) | Art. 6(1)(a) — consent | Analytics will be activated only once a compliant cookie consent mechanism is in place (see § 7) |
| Server/access logs | Art. 6(1)(f) — legitimate interest | Hosting provider’s operational and security logging; not under my direct control |
How data is stored and shared
4.1 Storage
Booking and collaboration form submissions are stored in the WordPress database of this website (the backend). Access is restricted to me as the site administrator. The website is hosted on a server; please refer to your browser’s connection information for the hosting environment.
4.2 No selling of data
Your personal data is never sold, rented, or otherwise commercially transferred to third parties.
4.3 Third-party processors and services
The following third parties may process personal data in connection with the Website, acting as data processors or independent controllers:
| Service | Role | Data involved | Privacy policy |
|---|---|---|---|
| WordPress.org | Independent controller | WordPress.org login for comments | wordpress.org/about/privacy |
| Gravatar (Automattic) | Independent controller | Email hash, avatar image for comments | automattic.com/privacy |
| Google Site Kit / Google Analytics | Data processor / independent controller | Anonymised usage data (once activated — see § 7) | policies.google.com/privacy |
| Website hosting provider | Data processor | All data stored on the server, server logs | Hosting provider’s privacy policy |
4.4 International transfers
Some third-party services listed above (e.g., Google) may transfer personal data to countries outside the European Economic Area (EEA). Where this occurs, such transfers are subject to appropriate safeguards under GDPR Chapter V, including Standard Contractual Clauses (SCCs) or adequacy decisions. I rely on those third parties to maintain GDPR-compliant transfer mechanisms.
Retention and deletion
5.1 Booking and collaboration enquiries
Form submissions are retained in the website backend for as long as operationally necessary. If a booking or collaboration does not proceed, data is deleted within a reasonable period after the enquiry is resolved or becomes inactive. You may request deletion of your submission at any time by contacting me (see § 15), and I will action it without undue delay unless I have a legal obligation to retain the data.
5.2 Blog comments
Published comments are retained for as long as the associated blog post remains live and you do not request removal. You may request deletion of your comment at any time. IP addresses logged with comments are retained for as long as the comment exists.
5.3 Community gallery photographs
Photographs are retained indefinitely as part of the community documentation archive unless an individual exercises their right to removal (see § 6).
5.4 Server logs
Server logs are retained by the hosting provider according to their own retention policies, typically for a short operational window (days to weeks).
Deletion on request: For any data I control directly (form submissions, comments), you can request deletion at any time by emailing me. I will confirm and carry out deletion within 30 days unless legal or legitimate grounds require shorter or longer retention.
Your rights under GDPR
As a data subject under the GDPR, you have the following rights with respect to your personal data. These rights apply subject to applicable exemptions and the legal basis under which data is processed.
Request a copy of the personal data I hold about you (Art. 15).
Request correction of inaccurate or incomplete data (Art. 16).
Request deletion of your personal data (“right to be forgotten”) where applicable (Art. 17).
Request that processing is restricted in certain circumstances (Art. 18).
Receive your data in a structured, machine-readable format where processing is automated (Art. 20).
Object to processing based on legitimate interest, including community gallery photographs (Art. 21).
Where processing is based on consent (e.g., comments, analytics), withdraw it at any time without affecting prior processing (Art. 7(3)).
Lodge a complaint with the Italian supervisory authority, the Garante (see § 15).
To exercise any of these rights, contact me using the details in § 15. I will respond within 30 days of receiving a valid request. No fee is charged unless requests are manifestly unfounded or excessive.
Analytics and Google Site Kit
This Website plans to integrate Google Site Kit, which connects Google Analytics to the Website. This integration is not yet active.
When Google Site Kit / Google Analytics is activated, the following will apply:
- Analytics will only be loaded after obtaining your freely given, specific, informed, and unambiguous consent through a cookie consent banner or equivalent mechanism.
- IP anonymisation will be enabled to minimise the processing of personally identifiable information.
- The cookie policy (Part B below) will be updated to specifically describe the analytics cookies set.
- This Privacy Policy will be updated to reflect any changes in processing activities.
Until a compliant consent mechanism is in place and tested, Google Site Kit analytics are not activated. No analytics data is being collected via Google at this time.
Third-party services and external links
The Website contains links to external platforms including Instagram, LinkedIn, WordPress.org profiles, Gravatar, Reddit, and X (formerly Twitter). Clicking these links takes you to third-party websites that operate under their own privacy policies. I have no control over and accept no responsibility for those third parties’ data practices.
Social media icons and links on this Website are static links — they do not load third-party scripts, tracking pixels, or social buttons that would transmit your data to those platforms merely by visiting this Website.
The Website also links to alpidigitali.com, which is a separate professional services website with its own privacy policy.
Cookies and similar technologies
Cookies are small text files stored in your browser when you visit a website. This section explains what cookies this Website uses, why, and how you can control them.
9.1 Strictly necessary cookies
These cookies are essential for the Website to function and cannot be disabled. They do not require your consent under ePrivacy rules. On this WordPress-based site, they include:
| Cookie name | Purpose | Duration |
|---|---|---|
wordpress_test_cookie |
Checks that your browser accepts cookies (WordPress core) | Session |
wordpress_logged_in_* |
Authenticates logged-in WordPress users (admin only; not set for visitors) | Session / 14 days |
wp-settings-* |
Stores interface preferences for logged-in WordPress users | 1 year |
comment_author_* |
Remembers your name/email when leaving a comment, for convenience | 347 days |
9.2 Analytics cookies (not yet active)
Once Google Site Kit / Google Analytics is enabled, it will set analytics cookies (such as _ga, _gid, _gat). These will only be loaded with your prior consent. This section will be updated with full cookie names, durations, and purposes at that time.
9.3 Third-party cookies via embedded content or logins
If you choose to authenticate with your WordPress.org or Gravatar account to post a comment, those services may set their own cookies, governed by their respective cookie policies. This Website does not embed social media widgets, auto-playing video players, or other third-party content that would load third-party cookies by default.
9.4 Managing cookies
You can control and delete cookies through your browser settings. Deleting or blocking strictly necessary cookies may affect Website functionality. Browser-specific guidance:
Use of the website
By accessing and using wpali.me, you agree to these Terms of Use. If you do not agree, please do not use the Website.
10.1 Permitted use
You may browse, read, and share content from this Website for personal, non-commercial purposes, provided you attribute authorship appropriately. You may not:
- Scrape, crawl, or systematically extract content from the Website using automated tools without prior written permission
- Use content from this Website for commercial purposes without explicit written consent
- Reproduce or redistribute photographs without permission (see § 11)
- Use the Website to transmit spam, malware, or any unlawful or harmful content
- Attempt to gain unauthorised access to any part of the Website or its hosting infrastructure
- Impersonate another person or entity when posting comments
10.2 Comments
Comments on blog posts are moderated. By submitting a comment, you confirm that it is your own original content, does not infringe third-party rights, and does not contain defamatory, abusive, discriminatory, or otherwise unlawful material. I reserve the right to edit, refuse, or remove comments at my discretion, without obligation to provide reasons.
10.3 Availability
I make reasonable efforts to keep the Website available, but I do not guarantee uninterrupted access. The Website may be taken offline for maintenance, updates, or reasons beyond my control. I accept no liability for any loss arising from unavailability.
Intellectual property
11.1 Original content
All original content on this Website — including but not limited to blog posts, written text, photographs taken by me, and original creative works — is the intellectual property of Ali Kojok and is protected by copyright under Italian law (Legge 633/1941 and subsequent amendments) and applicable EU and international copyright law.
11.2 Photographs
All photographs published on this Website, including those in the community gallery, are taken by me unless otherwise attributed. Photographs may not be reproduced, redistributed, sold, licensed, or used in any commercial or non-commercial context without my express prior written consent. Requests for licensing or usage permissions should be sent to the contact details in § 15.
11.3 Photographs of third parties
Photographs in the community gallery may depict identifiable individuals who are members of the WordPress community, taken at public events. These are shared for community documentation and journalistic purposes. Any individual who appears in a photograph and objects to its publication may contact me (§ 15) to request removal. Such requests will be assessed promptly.
11.4 Third-party content
Where the Website references, links to, or cites third-party material, all intellectual property rights in that material remain with the respective rights-holders. Such references do not imply endorsement.
11.5 WordPress
This Website is built on WordPress, which is open-source software licensed under the GPL. “WordPress” is a registered trademark of the WordPress Foundation. Use of the WordPress name on this Website is for informational and community purposes only; this Website is not affiliated with or endorsed by the WordPress Foundation.
Service bookings and collaborations
12.1 Nature of enquiries
Submitting a form on the Book Me or Collab pages does not constitute a binding contract, reservation, or commitment of any kind. It is an expression of interest and an invitation to discuss. A contractual relationship, if any, will only arise through a separate written agreement.
12.2 No guarantee of response
I will endeavour to respond to all enquiries within a reasonable timeframe, but I do not guarantee a response to every submission, particularly during periods of high demand or unavailability.
12.3 Professional services
Professional website-related services are offered and invoiced through Alpi Digitali. Any booking made through this Website may be transitioned to that entity for the purpose of delivering services. The terms and conditions applicable to actual service delivery will be set out in the relevant service agreement.
12.4 Accuracy of information submitted
You are responsible for ensuring that the information you provide in booking and collaboration forms is accurate and up to date. Providing false or misleading information may result in rejection of your enquiry.
Limitation of liability
This Website is a personal website. To the fullest extent permitted by applicable law:
- Content on this Website is provided for informational and personal expression purposes only and does not constitute professional advice of any kind (legal, technical, financial, or otherwise).
- I am not liable for any direct, indirect, incidental, or consequential loss or damage arising from your use of, or inability to use, the Website or any content on it.
- I am not liable for the content or practices of any third-party websites linked from this Website.
- Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud, or any other liability that cannot be excluded under applicable law.
Governing law and jurisdiction
These Terms of Use and Privacy Policy are governed by the laws of Italy, without prejudice to any mandatory consumer protection provisions applicable in your country of residence.
Any dispute arising from or connected to these terms or your use of this Website shall be subject to the exclusive jurisdiction of the courts of Turin (Torino), Italy, unless applicable law requires otherwise.
For users resident in the European Union, you retain the right to seek recourse from the competent supervisory authority or courts in your country of habitual residence.
14.1 Changes to this policy
I may update these Policies and Terms from time to time to reflect changes in the law, the Website’s functionality, or my data practices. The “Last updated” date at the top of this page will be revised accordingly. For material changes affecting your rights, I will take reasonable steps to draw your attention to them (for example, via a notice on the Website). Continued use of the Website after changes are posted constitutes acceptance of the updated terms.
Contact and complaints
15.1 Exercising your rights or making enquiries
For any data protection enquiry, to exercise your rights under § 6, to request removal from the community gallery, or for any general question about these policies, contact:
Ali Kojok — wpali.me
Website: wpali.me
Contact form: wpali.me/book-me
WordPress.org profile: profiles.wordpress.org/amkojok
I will acknowledge receipt of your request and aim to respond substantively within 30 calendar days. If your request is complex or numerous, I may extend this period by a further two months and will notify you accordingly.
15.2 Right to complain to a supervisory authority
If you believe your data protection rights have not been adequately addressed, you have the right to lodge a complaint with a data protection supervisory authority. The lead supervisory authority for this Website is:
Garante per la protezione dei dati personali
Piazza Venezia 11 — 00187 Roma, Italia
Web: www.garanteprivacy.it
Email: garante@gpdp.it
If you are based in another EU member state, you may also contact or complain to your local supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.